VDB

GCVE-110-CERTCC-2006-854856

GCVE-110-CERTCC-2006-854856
Advisory Published
Vulnetix · Advisory published November 1, 2006
The Microsoft WMI Object Broker ActiveX control bypasses the ActiveX security model, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system.
Download JSON Open in Console

Risk Scores

certcc-cam
certcc-cam
impact18population10exploitation12widely_known20score_current37.4625ease_of_exploitation20
certcc-vrda
certcc-vrda
d1_impact3d1_population3d1_direct_report0

Aliases

CVE-2006-4704

Transitive aliases

GHSA-c2c7-569v-pv4fGSD-2006-4704

References

WMI Object Broker ActiveX Control bypasses ActiveX security model
url
WMI Object Broker ActiveX Control bypasses ActiveX security model
url
WMI Object Broker ActiveX Control bypasses ActiveX security model
url
WMI Object Broker ActiveX Control bypasses ActiveX security model
advisory
WMI Object Broker ActiveX Control bypasses ActiveX security model
advisory
WMI Object Broker ActiveX Control bypasses ActiveX security model
advisory
WMI Object Broker ActiveX Control bypasses ActiveX security model
advisory
WMI Object Broker ActiveX Control bypasses ActiveX security model
advisory
WMI Object Broker ActiveX Control bypasses ActiveX security model
advisory
WMI Object Broker ActiveX Control bypasses ActiveX security model
advisory
WMI Object Broker ActiveX Control bypasses ActiveX security model
advisory

Browse GCVE Records

73,161 records in the GCVE database · Updated July 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›